1. 13 Nov, 2013 7 commits
  2. 12 Nov, 2013 10 commits
  3. 11 Nov, 2013 4 commits
    • antirez's avatar
      Sentinel: leadership handling changes WIP. · 8c1bf9a2
      antirez authored
      Changes to leadership handling.
      
      Now the leader gets selected by every Sentinel, for a specified epoch,
      when the SENTINEL is-master-down-by-addr is sent.
      
      This command now includes the runid and the currentEpoch of the instance
      seeking for a vote. The Sentinel only votes a single time in a given
      epoch.
      
      Still a work in progress, does not even compile at this stage.
      8c1bf9a2
    • antirez's avatar
      Sentinel: handle Hello messages received via slaves correctly. · 0bac36d0
      antirez authored
      Even when messages are received via the slave, we should perform
      operations (like adding a new Sentinel) in the context of the master.
      0bac36d0
    • antirez's avatar
      9e1b27d4
    • antirez's avatar
      Sentinel: epoch introduced. · b93b0adc
      antirez authored
      Sentinel state now includes the idea of current epoch and config epoch.
      In the Hello message, that is now published both on masters and slaves,
      a Sentinel no longer just advertises itself but also broadcasts its
      current view of the configuration: the master name / ip / port and its
      current epoch.
      
      Sentinels receiving such information switch to the new master if the
      configuration epoch received is newer and the ip / port of the master
      are indeed different compared to the previos ones.
      b93b0adc
  4. 06 Nov, 2013 3 commits
  5. 26 Sep, 2013 1 commit
  6. 24 Jul, 2013 1 commit
    • antirez's avatar
      sdsrange() does not need to return a value. · 6ea8e094
      antirez authored
      Actaully the string is modified in-place and a reallocation is never
      needed, so there is no need to return the new sds string pointer as
      return value of the function, that is now just "void".
      6ea8e094
  7. 11 Jul, 2013 2 commits
  8. 10 Jul, 2013 1 commit
  9. 09 Jul, 2013 1 commit
  10. 08 Jul, 2013 2 commits
  11. 20 Jun, 2013 1 commit
    • antirez's avatar
      Sentinel: parse new INFO replication output correctly. · 4c0f8c4e
      antirez authored
      Sentinel was not able to detect slaves when connected to a very recent
      version of Redis master since a previos non-backward compatible change
      to INFO broken the parsing of the slaves ip:port INFO output.
      
      This fixes issue #1164
      4c0f8c4e
  12. 30 Apr, 2013 2 commits
    • antirez's avatar
      Sentinel: changes to tilt mode. · e5ef85c4
      antirez authored
      Tilt mode was too aggressive (not processing INFO output), this
      resulted in a few problems:
      
      1) Redirections were not followed when in tilt mode. This opened a
         window to misinform clients about the current master when a Sentinel
         was in tilt mode and a fail over happened during the time it was not
         able to update the state.
      
      2) It was possible for a Sentinel exiting tilt mode to detect a false
         fail over start, if a slave rebooted with a wrong configuration
         about at the same time. This used to happen since in tilt mode we
         lose the information that the runid changed (reboot).
      
         Now instead the Sentinel in tilt mode will still remove the instance
         from the list of slaves if it changes state AND runid at the same
         time.
      
      Both are edge conditions but the changes should overall improve the
      reliability of Sentinel.
      e5ef85c4
    • antirez's avatar
      ef05a78e
  13. 26 Apr, 2013 1 commit
    • antirez's avatar
      Sentinel: only demote old master into slave under certain conditions. · 48ede0d8
      antirez authored
      We used to always turn a master into a slave if the DEMOTE flag was set,
      as this was a resurrecting master instance.
      
      However the following race condition is possible for a Sentinel that
      got partitioned or internal issues (tilt mode), and was not able to
      refresh the state in the meantime:
      
      1) Sentinel X is running, master is instance "A".
      3) "A" fails, sentinels will promote slave "B" as master.
      2) Sentinel X goes down because of a network partition.
      4) "A" returns available, Sentinels will demote it as a slave.
      5) "B" fails, other Sentinels will promote slave "A" as master.
      6) At this point Sentinel X comes back.
      
      When "X" comes back he thinks that:
      
      "B" is the master.
      "A" is the slave to demote.
      
      We want to avoid that Sentinel "X" will demote "A" into a slave.
      We also want that Sentinel "X" will detect that the conditions changed
      and will reconfigure itself to monitor the right master.
      
      There are two main ways for the Sentinel to reconfigure itself after
      this event:
      
      1) If "B" is reachable and already configured as a slave by other
      sentinels, "X" will perform a redirection to "A".
      2) If there are not the conditions to demote "A", the fact that "A"
      reports to be a master will trigger a failover detection in "X", that
      will end into a reconfiguraiton to monitor "A".
      
      However if the Sentinel was not reachable, its state may not be updated,
      so in case it titled, or was partiitoned from the master instance of the
      slave to demote, the new implementation waits some time (enough to
      guarantee we can detect the new INFO, and new DOWN conditions).
      
      If after some time still there are not the right condiitons to demote
      the instance, the DEMOTE flag is cleared.
      48ede0d8
  14. 24 Apr, 2013 1 commit
    • antirez's avatar
      Sentinel: always redirect on master->slave transition. · 1965e22a
      antirez authored
      Sentinel redirected to the master if the instance changed runid or it
      was the first time we got INFO, and a role change was detected from
      master to slave.
      
      While this is a good idea in case of slave->master, since otherwise we
      could detect a failover without good reasons just after a reboot with a
      slave with a wrong configuration, in the case of master->slave
      transition is much better to always perform the redirection for the
      following reasons:
      
      1) A Sentinel may go down for some time. When it is back online there is
      no other way to understand there was a failover.
      2) Pointing clients to a slave seems to be always the wrong thing to do.
      3) There is no good rationale about handling things differently once an
      instance is rebooted (runid change) in that case.
      1965e22a
  15. 19 Apr, 2013 1 commit
  16. 31 Jan, 2013 1 commit
  17. 19 Jan, 2013 1 commit